A retail company's security policy was written three years ago and has not been updated since. The IT environment has changed significantly with the adoption of cloud services. What should the security manager do to keep the policy current?

Wait for a security incident to occur before updating the policy to ensure the update addresses real threats.

Rewrite the policy from scratch based on the latest industry best practices without consulting stakeholders.

Keep the existing policy unchanged because it was approved by the board and is still in effect.

Schedule an annual policy review that includes stakeholders from IT, legal, and business units, and update the policy to reflect the current environment.

GIAC Security Leadership

Domain 1Objective 1

Managing Security Policy GSLC Practice Questions (Page 11)

Part of the Security Management and Governance domain, which makes up ~15% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 4–6 from this objective — we provide 51 practice questions to prepare you well beyond it. (estimate)

51questions here

11free pages

6concepts

Questions 51–51

51application · medium
A retail company's security policy was written three years ago and has not been updated since. The IT environment has changed significantly with the adoption of cloud services. What should the security manager do to keep the policy current?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to GSLC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GSLC” is a trademark of its owner, used for identification only.

Managing Security Policy GSLC Practice Questions (Page 11)

Questions 51–51

A retail company's security policy was written three years ago and has not been updated since. The IT environment has changed significantly with the adoption of cloud services. What should the security manager do to keep the policy current?

Keep studying — Security Management and Governance